Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Mercurial Directory traversal vulnerability
Plone credentials stored in session cookie
Plone Improper Session Management
Plone CMS Improper Session Management
MoinMoin Improper ACL handling for calendars and includes
MoinMoin Insertion of Sensitive Information into Log File
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Improper Access Control
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
MoinMoin Directory traversal vulnerability
MoinMoin Cross-site scripting (XSS) vulnerability
FTP backend for Duplicity Discloses Passwords to Process Listing
Django Arbitrary Code Execution
Zope Server vulnerable to DoS via header injection
Zope does not properly perform security registration for legacy names
Zope does not properly verify the access for objects with proxy roles
Zope allows attackers to modify raw image and file data
Py2Play Unpickles Untrusted Objects
ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.